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CLAIMS 

1. A system comprising: 

a portable integrated circuit device having stored thereon an authentication 
application and a definition of a list of trusted applications; and 

a computer, coupled to communicate with the portable integrated circuit 
device, to, 

form a secure connection between the portable integrated circuit 
device and an application running on the computer, 

request, via the application running on the computer, that the 
portable integrated circuit device unlock itself, 

receive the list of trusted applications from the portable integrated 
circuit device, and 

identify to the portable integrated circuit device whether the 
application is one of the applications in the list of trusted applications. 

2. A system as recited in claim 1, wherein the portable integrated circuit 
device is further to authenticate itself to the application running on the computer. 

3. A system as recited in claim 1, wherein the portable integrated circuit 
device is to unlock itself only if the application is one of the applications on the 
list of trusted applications. 

4. A system as recited in claim 3, wherein: 

the portable integrated circuit device, in unlocking itself, makes private 
information stored thereon accessible to the application; and 



Lee & Hayes. PLLC(509) 324-9256 



53 



MS1-282USC12 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



the portable integrated circuit device includes a signaling device to notify a 
user of the portable integrated circuit device that it is safe to use the computer. 

5. A system as recited in claim 4, wherein the signaling device includes 
an indicator light. 

6. A system as recited in claim 1, wherein the portable integrated circuit 
device is to unlock itself only if both the application and the operating system 
executing on the computer are each one of the applications on the list of trusted 
applications. 

7. An apparatus comprising: 
a processor; and 

a nonvolatile memory, coupled to the processor, that stores both data and a 
program that, when a request to access the data is received, causes the processor to 
allow access to the data only if the requester can prove that the requester is an 
application on a list of trusted applications maintained by the apparatus. 

8. An apparatus as recited in claim 7, wherein the apparatus comprises a 
smart card. 

9. An apparatus as recited in claim 7, wherein the program further 
causes the processor to: 

send, to the requester, a challenge; 

receive a response to the challenge from the requester; 
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verify the response; and 

determine whether the requester is an application on the list of trusted 
applications only after the response is verified 
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